70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118 | Triage

Sharing

General

Target

70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118
Size

87KB
MD5

70ac79a9e2faedffc9cba459a12b17f6
SHA1

877dc1f2f41bbd70f4a8baa2a6604015b85d0b55
SHA256

f221d50563126f2f99c0e434507a856829c791c1560ad1c90079d0162039671c
SHA512

d8ab4165cc33f2c4b01861242fd4e5ce2d60bc17e6e84375c12e92d744495846386fe4d1e6ce54fd01d359b5ea29402bf57dac17bb864c8c148fd59bcc99c900
SSDEEP

1536:nQ93/HQuBx4kjo2n/wFBzW4M25vYpNsU6HNLSuW5GzEEPjd/Kz9iSTleKuVNtG:urBPjo2n/wu4MIvYpNsnHNLCK5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118

Files

70ac79a9e2faedffc9cba459a12b17f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5698b7fa12da6d7738788c6818ae6eb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CheckMenuItem
CreateMenu
GetCursor
GetFocus
DestroyMenu
GetWindow
GetDC
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDesktopWindow
GetCursorPos
ReleaseDC

gdi32

DeleteObject
CreateBitmap
SelectPalette

oleaut32

VarBoolFromStr

kernel32

GetSystemInfo
GetLastError
InitializeCriticalSection
EnterCriticalSection
GlobalAlloc
GetSystemTime
GetLocalTime
LeaveCriticalSection
DeleteCriticalSection
GlobalFree
FreeLibrary
HeapAlloc
HeapCreate
LoadLibraryA

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE